For debugging purposes could you temporarily comment out the output.elastiscsearch
section in your filebeat.yml
and set this instead?
output.console:
enabled: true
Then restart Filebeat and check if it's container logs are showing events corresponding to logs from your microservice container?